4 hours ago
Responsibilities
- Lead, mentor, and technically direct the SSO engineering squad while governing architecture and representing SSO on architecture review boards.
- Maintain 24x7 reliability and 99.99%+ availability for PingFederate, PingDirectory, PingID, and related enterprise federation infrastructure.
- Manage workforce and CIAM integrations, Citrix VDI authentication, clinical application federation, and enterprise SaaS onboarding.
- Lead migration to PingOne Workforce Cloud and modernize identity architecture, authorization, authentication grants, and application onboarding standards.
- Design PingOne DaVinci orchestration workflows incorporating adaptive MFA, risk signals, passwordless authentication, FIDO2, and WebAuthn.
- Automate identity-service infrastructure and developer workflows on GCP using Terraform, GKE, containers, CI/CD pipelines, and self-service tooling.
- Partner with Enterprise Architecture, Security Architecture, Microsoft/M365, IAM, and application teams on authentication and authorization modernization.
Requirements
- 8+ years of dedicated IAM and enterprise SSO engineering experience.
- 2+ years leading engineering squads, mentoring developers, and partnering with enterprise and security architecture teams.
- Deep expertise with PingFederate, PingID, PingDirectory, PingCentral, PingOne Workforce Cloud, PingOne Customer, and PingOne DaVinci.
- Expertise in SAML 2.0, OAuth 2.0, OpenID Connect, JWT, SCIM, authorization flows, PKCE, token exchange, and legacy grant remediation.
- Knowledge of Microsoft 365 federation, Hybrid Identity, Microsoft Entra ID, Conditional Access, Intune, and PRT.
- Experience with high-availability, mission-critical environments; healthcare and HIPAA compliance experience is preferred.
- Hands-on experience with GCP, Terraform, Kubernetes/GKE, Docker, Jenkins or GitLab CI, REST APIs, Python, PowerShell, and Bash.
- Preferred certifications include Ping Identity certifications, Microsoft SC-300 or SC-100, Google Cloud Professional Cloud DevOps or Cloud Security Engineer, CISSP, and CIAM.
Benefits
- Competitive salary package, share plan, performance bonuses, recognition awards, and referral bonus.
- Career coaching, global career opportunities, internal development programs, and technical leadership development.
- Training, certifications, coaching, online learning subscriptions, workshops, conferences, and internal technology communities.
- Hybrid work and flexible working hours.
- Healthcare, wellbeing programs, wellbeing apps, employee assistance, medical, dental, vision, disability, life insurance, AD&D, flexible spending accounts, HSA, and 401(k) matching benefits for eligible U.S. full-time roles.
- Inclusive employee communities, hobby clubs, interest groups, events, and diversity programs.
- Ability to attend internal and external meetings by video and work onsite at corporate or client offices as necessary.
Tech Stack
About Endava
Endava is a London-headquartered IT services company that designs, builds, and runs digital platforms for enterprises across payments, banking, insurance, retail, telecoms, and media. It provides consulting, agile software development, testing, cloud, and managed services on a project and outsourcing basis. Founded in 2000, Endava is a public company listed on the NYSE and operates across Europe, the Americas, and Asia.